StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 426 of 498 · hard

An architect evaluates a proposed private data service. Which two statements accurately map technology to requirements? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.A vault's encryption guarantees that every permitted secret reader is trustworthy
  2. B.A managed identity avoids stored workload credentials but still needs the correct data permissions
  3. C.Rate limiting proves a caller owns the requested record
  4. D.At-rest encryption prevents all data export by authorized code
  5. E.Private networking constrains access paths but does not replace resource authorization
Show the answer and explanation

✓ Correct answers

  • A managed identity avoids stored workload credentials but still needs the correct data permissions
  • Private networking constrains access paths but does not replace resource authorization

Network paths and identity authorization are separate, and managed identity requires explicit permissions. Vault encryption cannot make an authorized reader trustworthy, rate limits do not prove record ownership, and authorized code can still export decrypted data.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.